Application has been sent. You will be contacted shortly to clarify the details.
Privacy Policy
PRIVACY POLICY
This privacy notice informs you about the data we collect when you use our website or our services. By collecting this information, we act as a data controller and, by law, we are required to provide you with information about who we are, why and how we use your data, and the rights you have as a data subject.
Updated on 10th April 2026
WHO WE ARE
Aroeira Lisbon Hotel – Unipessoal, Lda.
Avenida Pinhal da Aroeira 1, 2820-112 Herdade da Aroeira, Portugal
geral@aroeiralisbonhotel.com | +351 210 514 999 (national landline call rate)
For any questions regarding the processing of your personal data, please contact us through the means indicated above.
Avenida Pinhal da Aroeira 1, 2820-112 Herdade da Aroeira, Portugal
geral@aroeiralisbonhotel.com | +351 210 514 999 (national landline call rate)
For any questions regarding the processing of your personal data, please contact us through the means indicated above.
WHAT DATA WE COLLECT AND WHY
We collect personal data in the following situations:
Contact forms and information requests
Data: name, email, phone number, message.
Purpose: to respond to your request.
Legal basis: consent (Art. 6(1)(a) GDPR).
Retention: up to 12 months after the last contact.
Data: name, email, phone number, message.
Purpose: to respond to your request.
Legal basis: consent (Art. 6(1)(a) GDPR).
Retention: up to 12 months after the last contact.
Accommodation, table or services bookings
Data: name, email, phone number, dates, communicated preferences.
Purpose: to process your booking.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Retention: 10 years (tax and legal obligations).
Data: name, email, phone number, dates, communicated preferences.
Purpose: to process your booking.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Retention: 10 years (tax and legal obligations).
Newsletter subscription
Data: email address.
Purpose: to send commercial communications about offers, news and events.
Legal basis: consent (Art. 6(1)(a) GDPR).
Retention: until subscription is cancelled.
You may cancel your subscription at any time via the link at the bottom of each email or by contacting us directly.
Data: email address.
Purpose: to send commercial communications about offers, news and events.
Legal basis: consent (Art. 6(1)(a) GDPR).
Retention: until subscription is cancelled.
You may cancel your subscription at any time via the link at the bottom of each email or by contacting us directly.
Website browsing
Data: IP address, device type, pages visited, visit duration — collected through third-party analytical cookies (Google Analytics).
Purpose: to improve website performance and browsing experience.
Legal basis: consent (Art. 6(1)(a) GDPR), obtained through the cookie management panel.
Retention: in accordance with each provider’s policies (Google Analytics: 26 months by default).
Data: IP address, device type, pages visited, visit duration — collected through third-party analytical cookies (Google Analytics).
Purpose: to improve website performance and browsing experience.
Legal basis: consent (Art. 6(1)(a) GDPR), obtained through the cookie management panel.
Retention: in accordance with each provider’s policies (Google Analytics: 26 months by default).
COOKIES
We use the following types of cookies:
Strictly necessary cookies— essential for the website to function correctly. Do not require consent.
Analytical cookies— allow us to understand how visitors use the website, through services such as Google Analytics. Only activated with your consent.
You may manage your cookie preferences at any time through the cookie panel available on the website, or by configuring your browser to refuse cookies. Please note that disabling some cookies may affect the functionality of the website.
SHARING DATA WITH THIRD PARTIES
We do not sell or transfer your personal data to third parties for commercial purposes. We may share data with service providers who support the operation of our website and services, namely:
Brevo (Sendinblue SAS)— newsletter management. Company headquartered in France, with data transfers within the European Economic Area and in compliance with GDPR.
Google LLC — website analytics services (Google Analytics). Data transfers to the USA are covered by Standard Contractual Clauses.
Booking engine (D-Edge)— processing of accommodation bookings.
All subcontractors are subject to contractual obligations of confidentiality and security equivalent to those that bind us.
YOUR RIGHTS
As a data subject, you have the following rights, which you may exercise at any time:
Access — to know what data we hold about you
Rectification — to correct inaccurate or incomplete data
Erasure — to request the deletion of your data
Restriction — to restrict processing in certain circumstances
Portability — to receive your data in a structured digital format
Objection — to object to processing based on legitimate interest
Withdrawal of consent — without retroactive effect, at any time
Rectification — to correct inaccurate or incomplete data
Erasure — to request the deletion of your data
Restriction — to restrict processing in certain circumstances
Portability — to receive your data in a structured digital format
Objection — to object to processing based on legitimate interest
Withdrawal of consent — without retroactive effect, at any time
To exercise any of these rights, please contact us at geral@aroeiralisbonhotel.com. We will respond within a maximum of 30 days.
RIGHT TO LODGE A COMPLAINT
If you consider that the processing of your data violates applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt
Rua de São Bento, 148-3.º, 1200-821 Lisboa
We would prefer, however, that you contact us directly first, so that we can resolve the matter quickly and directly.
www.cnpd.pt
Rua de São Bento, 148-3.º, 1200-821 Lisboa
We would prefer, however, that you contact us directly first, so that we can resolve the matter quickly and directly.
DATA SECURITY
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or improper disclosure.
UPDATES TO THIS PRIVACY POLICY
This policy is reviewed periodically. Whenever relevant changes are made, we will update the date at the top of this document. In the event of significant changes that affect your rights, we will endeavour to notify you directly.